Elasticsearch Engineer

August Schell is looking for an Elasticsearch Engineer to join our team in support of a cybersecurity, network architecture, and mission support role with our DoD customer. The engineer will be part of a project team responsible for working with clients and peers and building a high performing system using Elastic. Individuals in this role must be able work hybrid and go on site at Fort Meade as requested.

Responsibilities

Include:

• Demonstrate expertise with Elastic Stack including designing and implementing solutions to aggregate logs from multiple systems.
• Extensive experience installing, configuring, upgrading, maintaining and troubleshooting Elastic Stack components
• Proficient in developing Kibana visualizations, dashboards, and alerting capabilities to support threat hunting, security monitoring, and data analytics
• Strong knowledge of log ingestion pipelines, Elastic Common Schema (ECS) formatting, and Logstash plugins and filters.
• Experience maintaining and troubleshooting Elastic infrastructure and proactively identifying and resolving anomalous behavior prior to escalation
• Skilled in deploying and managing systems in compliance with federal security requirements and standards.
• Proven ability to lead engineering initiatives, collaborating with vendors to determine best practices for system architecture, deployment, and ongoing maintenance.
• Solid understanding of system integrations, dependencies, and interactions across complex enterprise environments.
• Experience utilizing Cribl in the onboarding and normalization process

Requirements

• Two (2) years of overall experience in a DoD or Federal IT environment
• Have an active Top Secret
• DoD 8570 IAM/IA Technical (IAT) Level II certification
• Strong written and verbal communication skills for reporting assessment findings. Stand out with:
• Bachelor's degree (IT-related field preferred)
• Experience with Docker, Kubernetes, Elastic Cloud on Kubernetes (ECK) and cloud containerization Knowledge of Linux/UNIX and networking
• Familiarity with NIFI, Kafka, Confluent, McAfee, Tenable